No, I surmise it is Banner Exchange because it appears at the end of page's loading, with the banner. It appears on a variety of SWC related site (at least three) and the only thing I can see they have in common is the banner. Alas it appears for a variety of banners so I don't know which one to blame. A quick google search shows that this kind of IP adress could be a trojan downloaded through a false counter code.
I surmise it is not in my computer because we are at least two (with two different antivirus) to experience the problem. And I would like to know if others in Combine had the same.
Former Wraith - Former Valeo Exarch and SRE Master Trader
If it is appearing for multiple banners, it isn't the banner exchange to blame. I took a look at each of the banners in rotation currently and did not see anything suspicious. You are the only person who has reported this.